Kaleris vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Kaleris products: 2 record(s), with severity, exploitation and fixes.

Yard Management Solutions 2

Exploited only (KEV) →

CVE-2026-31151 Critical · 9.8 CWE-288 Apr 6, 2026

Authentication Bypass Using an Alternate Path or Channel in Kaleris Yard Management Solutions

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resources.

CVE-2026-31150 Medium · 4.3 CWE-284 Apr 6, 2026

Improper Access Control in Kaleris Yard Management Solutions

Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to view the truck's dashboard resources.